CVE-2026-40448: Samsung One

Medium severity, CVSS 5.3. EPSS: 0.1% chance of exploitation in the next 30 days.

Potential Integer overflow in tensor allocation size calculation could lead to insufficient memory allocation for large tensors in Samsung Open Source ONE. Affected version is prior to commit  1.30.0.

Affected products

• Samsung One: before 1.30.0 (fixed in 1.30.0)

Published 2026-04-22. Last modified 2026-06-17.